Registry & Packaging

Edit 0 7 …

Registry keys that can be removed when packaging

Anything with the MostRecentApplication key

HKLM

Registry Key
Description
\System\CurrentControlSet\Services\Eventlog\Application\
 The security of each log is configured locally through these values
\System\CurrentControlSet\ENUM\LEGACY
\Software\Microsoft\Windows\CurrentVersion\SharedDLL
\System\CurrentControlSet001\
 Backup of the Current ControlSet file
\System\CurrentControlSet002\
 Backup of the Current ControlSet file
\Software\Microsoft\Windows\CurrentVersion\Syncmgr
 Configuration info for offline files
\Software\Microsoft\WBEM\
 Contains data for Web-based enterprise management
\Software\Microsoft\Windows\CurrentVersion\GroupPolicy\
 Configuration Information for Group Policies
\Software\Microsoft\Rpc\UuidSequenceNumber
 NetBios network settings











HKCU

Registry Key
Description
\Software\Microsoft\Windows\CurrentVersion\Shell\Extensions\Cached
\SessionInformation\ProgramCount
 Number of apps that were open during capture
\Software\Microsoft\Windows\CurrentVersion\ControlsFolder"Presentation Cache"
\Software\Classes\VirtualStore
\App_Events
 Information related to the sounds associated with events
\Console
 Related to the command prompt window
\Software\Microsoft\Windows\CurrentVersion\Applets
 Information about current installation session.
\Software\Microsoft\Windows\CurrentVersion\SessionInfo
 Contains OS information not relevant to the capture
\Software\Microsoft\CurrentVersion\StreamMRU
 Related the the current state of the machine
\Software\Microsoft\Windows\CurrentVersion\MountPoints\
 Drive Mappings on the current machine
\Software\Microsoft\Windows\CurrentVersion\StartPage\
 Starting Page of Internet Explorer
\Software\Microsoft\Windows\CurrentVersion\Prefetcher
 Related to OS memory management
\Software\Microsoft\Windows\CurrentVersion\Shell\BagMRU
 Most recently used end user settings
\Software\ControlPanel\Keyboard\InitialKeyboardIndicators
 Controls the NumLock key
\Software\Microsoft\InternetExplorer\Toolbar\Shellbrowser
 Controls the Internet Explorer tool bar
\Software\Microsoft\Windows\CurrentVersion\Explorer\RunMRU
 Most recently used list for the RUN command
\Software\Microsoft\InternetExplorer\Toolbar\Explorer
 Internet Explorer tool bar configuration
\Software\Microsoft\Windows\CurrentVersion\Explorer
 Contains several subkeys used for Windows Explorer configuration
\Software\Microsoft\Windows\CurrentVersion\Run
  Causes the application to start after every reboot
\Software\Microsoft\Windows\CurrentVersion\RunOnce
 Causes the application to start after the first reboot